Sub-Processors
Third-party service providers we use to deliver our services
Curesh uses certain third-party service providers ("Sub-Processors") to assist in providing our services. These Sub-Processors may process personal data on our behalf. This page provides transparency about who these providers are and what data they may access.
Data Processing Agreements
All Sub-Processors listed below have entered into Data Processing Agreements (DPAs) with Curesh that comply with GDPR requirements. For transfers outside the EU/EEA, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs).
Last Updated: December 2025
Request notification of changesCurrent Sub-Processors
Google Cloud Platform (GCP)
DPA in placeLocation
Europe (EU regions)
Purpose
Cloud infrastructure and data hosting
Data Processed
All customer data, GPS coordinates, temperature logs
Cloudflare
DPA in placeLocation
EU & Global
Purpose
CDN, DDoS protection, and security services
Data Processed
IP addresses, request metadata
Stripe
DPA in placeLocation
Ireland (EU)
Purpose
Payment processing
Data Processed
Billing information, payment card details
Teltonika Telematics
DPA in placeLocation
Lithuania (EU)
Purpose
GPS and telematics hardware provider
Data Processed
Device identifiers, firmware data
Postmark
DPA in placeLocation
United States (EU SCCs)
Purpose
Transactional email delivery
Data Processed
Email addresses, notification content
Sentry
DPA in placeLocation
United States (EU SCCs)
Purpose
Error tracking and monitoring
Data Processed
Error logs, device information
Google Analytics
DPA in placeLocation
EU (Analytics 4)
Purpose
Website analytics
Data Processed
Anonymized usage data, page views
Intercom
DPA in placeLocation
Ireland (EU)
Purpose
Customer support and communication
Data Processed
Name, email, support conversations
Processing Categories
Infrastructure
Cloud hosting, data storage, and content delivery services that power our platform.
Business Operations
Payment processing, customer communication, and support tools.
Analytics & Monitoring
Error tracking, usage analytics, and service reliability monitoring.
Your Rights Regarding Sub-Processors
Right to Object
If you object to a new Sub-Processor, you may contact us within 30 days of being notified. We will work with you to address your concerns or, if necessary, offer alternatives.
Notification of Changes
We will update this page when adding or removing Sub-Processors. Enterprise customers receive direct email notifications about any changes.
Request DPA Copies
Enterprise customers can request copies of our Data Processing Agreements with Sub-Processors by contacting our DPO.
Questions About Our Sub-Processors?
Contact our Data Protection Officer for more information about how we work with third parties.